: Set Up the ION 3000 with an Existing Router
Focus
Focus

Set Up the ION 3000 with an Existing Router

Table of Contents

Set Up the ION 3000 with an Existing Router

Set up the ION 3000 in analytics or control mode with an existing router using inline insertion method and ensure internet access is available. Configure the device on the console.
Set up the ION 3000 in the analytics or control mode with an existing router. This allows you to insert the ION 3000 in the network without making any modification to network settings at the remote office. To accomplish this, the ION 3000 utilizes an inline insertion method with fail-to-wire redundancy.
The inline insertion method enables the ION device to inspect and process traffic by only making physical changes to the network while maintaining or enabling additional redundancy.
  1. Plan and select a private WAN insertion topology that you will use to insert the ION 3000 into the network.
    Ensure that internet access using a private WAN connection or direct internet broadband is available at the site to allow remote configuration of the ION 3000.
  2. Mount the ION 3000 in the required installation location.
  3. Connect the cables in the following order:
    1. Controller port—The controller port is used for ION-to-network controller communication and monitoring. Connect the controller port to an ethernet port. The controller port is configured as a DHCP client by default.
    2. Internet port(s)—Plug the internet ports inf a broadband internet source. These ports are protected by a firewall and can be plugged directly to the internet source. They can also exist behind a traditional firewall or NAT device. These ports are configured as DHCP by default. If the internet ports require static IP configuration, it is highly recommended that you configure the controller port to an existing DHCP-enabled LAN with access to the internet using a private network to configure the static internet ports.
  4. Prepare to install the private WAN connections.
    Physically cabling these links may result in a 1 to 5 seconds network interruption. It is best practice to execute steps 4-7 during low traffic time or a network maintenance window where 1 to 5 seconds outages can be tolerated.
  5. Cable the private WAN connections as designed in step 1.
    After cabling, the devices connected to corresponding WAN/LAN pairs should reconnect link state up. If this does not happen, verify cabling/settings on the connected devices, along with the fail-to-wire cabling matrix.
  6. Power on the ION 3000.
    Verify the power-off link on the ION 3000 before powering on the device.
  7. Verify communication between devices connected to the corresponding WAN/LAN connections after the ION 3000 power sequence is completed.
    At this point, the ION 3000 appears as Connected and online-restricted.
  8. Next Step: Proceed to claim and configure the device on the Prisma SD-WAN console.